Description
Google Chrome before 9.0.597.94 does not properly perform process termination upon memory exhaustion, which has unspecified impact and remote attack vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | chromium-browser | 6.0.472.63~r59945-5+squeeze2 | DSA-2166-1 |
Advisories 1
- DSA-2166-1 chromium-browser - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- 43368 third-party-advisory
- http://code.google.com/p/chromium/issues/detail?id=70456
- oval:org.mitre.oval:def:14506 vdb-entry signature
- http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_08.html
- http://www.srware.net/forum/viewtopic.php?f=18&t=2190
- 43342 third-party-advisory
- DSA-2166 vendor-advisory
- ADV-2011-0408 vdb-entry
- 46262 vdb-entry